1084 matches found
Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986121)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986121 advisory. Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1...
Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986137)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986137 advisory. Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tomcat: from...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-590701)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-590701 advisory. Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1...
Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986136)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986136 advisory. For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue...
Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986123)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986123 advisory. Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the fail...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986092)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986092 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitte...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986107)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986107 advisory. Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41,...
CVE-2025-11346
A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....
CVE-2025-11346 ILIAS Base64 Decoding unserialize deserialization
A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....
CVE-2025-11344 ILIAS Certificate Import code injection
A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2...
CVE-2025-11344
CVE-2025-11344 affects the ILIAS open-source learning platform in versions up to 8.23, 9.13, and 10.1. The vulnerability involves an unknown function within the Certificate Import Handler that can be manipulated to achieve Remote Code Execution . Exploitation may be possible remotely. A fix is pu...
CVE-2025-11344 ILIAS Certificate Import code injection
A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2...
Kibana 8.18.8, 8.19.5, 9.0.8, 9.1.5 Security Update (ESA-2025-17)
Kibana Stored Cross-Site-ScriptingXSS ESA-2025-17 Improper Validation of Specified Type of Input in Kibana can lead to stored Cross-Site-Scripting XSS Affected Versions: 7.x: All versions from 7.0.0 and up to and including 7.17.29 8.x: All versions from 8.0.0 and up to and including 8.18.7 8.19.x...
Kibana 8.18.8, 8.19.4, 9.0.7, 9.1.4 Security Update (ESA-2025-16)
Kibana Cross-Site-Scripting XSS ESA-2025-16 Improper Neutralization of Input During Web Page Generation in Vega visualizations in Kibana can lead to Cross-Site-Scripting XSS Affected Versions: 7.x: All versions from 7.0.0 and up to and including 7.17.29 8.x: All versions from 8.0.0 and up to and...
PT-2025-40942
Name of the Vulnerable Software and Affected Versions ILIAS versions up to 8.23 ILIAS versions up to 9.13 ILIAS versions up to 10.1 Description A flaw exists due to deserialization in the unserialize function of the Test Import component. This manipulation can be initiated remotely. Recommendatio...
PT-2025-40941
Name of the Vulnerable Software and Affected Versions ILIAS versions 8.23, 9.13, and 10.1 Description A flaw exists in ILIAS related to the Certificate Import Handler component. This issue allows for Remote Code Execution, potentially triggered remotely. Recommendations Upgrade to version 8.24...
EUVD-2023-29712
Malicious code in bioql PyPI...
EUVD-2024-3051
Malicious code in bioql PyPI...